Agent skill · software engineering · jeremylongshore
onenote-install-auth
Establish a least-privilege delegated Microsoft Graph connection for OneNote with tested consent and lifecycle controls. Use when registering or repairing OneNote authentication. Trigger with "set up OneNote auth", "register OneNote app", or "review Notes permissions".
Why this skill is useful
Provides specific instructions and scripts for setting up OneNote API authentication with delegated credentials that are not widely available in public documentation.
What it needs
Requires node, python installed locally. Requires azure account access. About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
OneNote Delegated Authentication Intake Overview Establish a least-privilege delegated Microsoft Graph connection for OneNote with tested consent and lifecycle controls.. This workflow produces an auditable decision or artifact before any live action. Prerequisites Current first-party Microsoft Graph OneNote documentation and the selected integration's tested contract. Named identity, content, workload, security, and operations owners appropriate to the requested scope. Synthetic or approved non-production fixtures with secrets and real notebook content removed. Current Contract The OneNote service-specific overview says app-only authentication is unsupported. Use a delegated authorization flow and choose Notes.Create, Notes.Read, or Notes.ReadWrite according to the operation; treat conflicting generic application-permission tables as documentation drift, not authorization to deploy client credentials. Recheck the dated evidence map before relying on mutable permissions, limits, SDK behavior, supported resources, or cloud availability. Authentication Record app registration, account type, tenant, redirect URI, signed-in user, requested and granted delegated scopes, token-cache location, expiry, revocation, and reauthentication without storing secret values. Instructions 1. Classify the account as personal Microsoft or work or school and resolve the approved tenant boundary. 2. Register the application and exact redirect URI through the approved identity workflow. 3. Choose the minimum delegated Notes scope from the required read, create, or update operations. 4. Implement authorization-code or device flow appropriate to the client and protect token-cache material. 5. Run one synthetic read-only OneNote request and compare requested with granted scopes. 6. Document consent withdrawal, token-cache deletion, reauthentication, owner transfer, and production promotion. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/onenote-install-auth--1fd65f